Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier: cSrKmr9jw2XTecGr/Xr1cLXdzkz4O3w2+O9qj+0NjB4=
Subject key identifier: 3E:4E:6E:B6:D3:2C:FD:8F:4B:BD:2D:A1:51:CD:72:29:2D:A7:73:28
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 019DCD18E6511D1499E40132DEAB60432F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 04:00:54 +0000
Manifest this update: Mon 27 Apr 2026 04:00:54 +0000
Manifest next update: Tue 28 Apr 2026 04:00:54 +0000
Files and hashes: 1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: gNdQeoLID7BoPSpj3a15EFKhly9kmKuwhV00DPwMmSY=)
2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:e6:51:1d:14:99:e4:01:32:de:ab:60:43:2f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Apr 27 04:00:54 2026 GMT
Not After : Apr 28 04:00:54 2026 GMT
Subject: CN=3e4e6eb6d32cfd8f4bbd2da151cd72292da77328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:58:f1:7b:c7:9a:e3:84:e1:97:b0:aa:cb:
72:72:00:ec:ad:2d:98:20:e0:5f:29:a1:79:6b:80:
bd:86:9c:d5:7a:21:46:e0:d7:9a:f6:09:22:50:14:
c7:4d:40:24:c9:e7:c7:7b:37:b3:21:a9:96:c4:90:
5a:bc:ef:49:36:36:0e:fc:64:b1:a8:c6:e2:8d:ae:
c4:3d:ac:92:b5:01:fc:1e:1b:10:f5:81:2d:4c:a0:
b0:7c:8c:74:a5:fa:37:b0:92:0c:25:17:cc:5c:0d:
13:ec:a1:62:31:3d:10:25:c8:85:64:d0:0c:e3:2a:
0d:8d:92:82:80:05:d1:14:52:63:f0:0e:18:e4:d9:
71:5f:e0:97:7e:d8:9e:f0:13:0d:88:bd:2d:fa:28:
63:80:07:e6:05:ea:a1:f9:b2:54:b3:d2:14:86:07:
e0:b0:cd:a8:fd:3f:53:3b:cb:ad:5a:c7:45:f3:77:
33:71:35:b4:92:49:a8:9b:60:b3:39:d8:50:f5:c9:
cc:5a:0c:59:74:8d:92:55:da:e1:2b:ef:4e:b2:a8:
a5:56:f3:e3:d7:31:58:cb:8a:9e:91:5c:7a:39:d8:
a9:d9:c6:d0:32:1d:1b:60:f8:b9:b5:7e:ce:03:0e:
fb:c9:e3:19:73:12:9a:2e:bd:93:f2:49:1a:3a:d0:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:6E:B6:D3:2C:FD:8F:4B:BD:2D:A1:51:CD:72:29:2D:A7:73:28
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:54:86:b2:44:2c:64:e4:03:b3:78:a6:1c:11:7b:4b:ad:ad:
56:cb:e9:ac:ac:8d:2b:5c:83:98:38:e5:7a:dd:91:04:10:3a:
6c:2d:a4:87:c4:32:36:47:ef:35:39:e1:07:44:30:78:41:67:
c8:c5:cd:31:63:08:48:ba:9f:41:36:f0:10:f9:da:e3:58:01:
3e:47:4c:de:a0:d2:73:2d:bb:b5:46:c6:9a:de:0f:40:e6:7d:
2c:2e:c6:44:2d:8b:4e:e0:fe:55:b2:f6:e2:4a:99:8c:b4:63:
51:68:cb:67:d7:ff:67:1d:51:16:b4:70:8d:20:67:7b:2e:b4:
8b:e6:12:90:c2:31:bc:52:a3:8d:8b:df:1b:b4:8d:5f:b7:b8:
0e:5b:f4:38:29:30:01:14:b4:83:18:28:d2:b6:cb:37:2e:26:
b9:f8:70:00:2c:bd:af:cb:a4:10:14:aa:89:25:8b:50:a3:34:
af:5d:45:57:fe:63:89:6e:54:25:d1:5f:eb:cc:15:0c:39:37:
70:62:0f:9a:d5:b2:dc:e8:00:29:4c:e9:9b:e1:81:a9:d6:ed:
64:23:21:6d:fa:aa:d0:40:ac:7f:fb:a4:a4:ed:ff:76:39:d4:
08:43:a2:21:97:19:6c:bc:ae:ea:dc:e1:36:17:5f:ca:a4:64:
ea:0c:db:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:00:13 2026 by rpki-client